Domain > data.biphysics.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to data.biphysics.com

MD5	A/V
65ee9e010831646a50b61cb8f3507972	[PUP.Optional.InstallCore]
f9b414bd06f66529b76ac62094b28ec2	[Adware.Downware.2709] [Win32/VOPackage.D] [NS:PUF.SilenceInstaller!1.9DDF]
4ffdd9eb57ae12a5ab926da85d921a43
3a526757f71a26fe219fd37682540f94
e83e4a95a27a48c3bc0c504846d008d6	[Adware.Downware.2703] [Adware/Downware.M.1] [Win32/VOPackage.E]
b87540490b1b206ff1ce2259f22be895	[Artemis!B87540490B1B] [Adware.Downware.2709] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Win32/VOPackage.D] [NS:PUF.SilenceInstaller!1.9DDF] [Adware.Win32.InstallCore.71]
86229e7252170796ba1b26c4b47ef246	[Suspicious.Cloud.5] [Win32/AnySend.A] [NSIS.Application.Vopackage.A]
c35c13abd5cf807fd6bd31a6ad42c93e	[WS.Reputation.1] [Trojan.Downloader.NSIS.FL] [NS:PUF.SilenceInstaller!1.9DDF]
aa5993902a8597952764d065e48fb983	[WS.Reputation.1] [Adware.Win32.VOPackage.77] [Win32/VOPackage.AD] [NS:PUF.SilenceInstaller!1.9DDF]
7f282b80e53215e70f7daf44a3229bdf	[PUP.Optional.VOPackage.A] [WS.Reputation.1] [TROJ_GE.7895382D] [NS:PUF.SilenceInstaller!1.9DDF] [Adware.Downware.3983] [VOPackage] [Win32/VOPackage.J] [Riskware/VOPackage] [AdInstaller.Vopackage] [Adware.Win32.VOPackage.40]
24f0264dc48f36ecf6f5a294bcaa51e1	[Artemis!24F0264DC48F] [PUP.Optional.VOPackage.A] [Trojan.ADH.2] [NS:PUF.SilenceInstaller!1.9DDF] [Adware.Downware.3986] [TR/VOPack.J] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [VOPackage] [Win32/VOPackage.J] [Trojan.VOPack] [Riskware/VOPackage] [AdInstaller.Vopackage] [Adware.Win32.VOPackage.40] [Win32/Trojan.Dropper.c9f]
17da58eb671cbce2b02a5eca94eebd0f	[Adware.Downware.2258] [AnyProtect] [Win32/AnyProtect.B] [MalSign.InstallC.D32]
6191f3adbb727cecfb7ce61340620e1c	[Artemis!6191F3ADBB72] [Trojan.ADH.SMH] [Win.Adware.Toggle-4] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Win32/VOPackage.J] [AdInstaller.Vopackage] [Adware.Win32.VOPackage.40]
bf1a3e080c920e11cc9dae1c0d6861eb	[Artemis!BF1A3E080C92] [Adware.Downware.3560] [Heuristic.BehavesLike.Win32.Suspicious-PKR.S] [Win32/AnyProtect.D] [AnyProtect.B] [Trojan.Win32.AnyProtect.40]
de09ed1d1f3210d9f0dac4967e447961	[Artemis!DE09ED1D1F32] [WS.Reputation.1] [NS:PUF.SilenceInstaller!1.9DDF] [BehavesLike.Win32.Dropper.dc]
37c68cf3fa4161e97b28796e7913cc61	[W32/Trojan.FGEA-6564] [VOPackage] [TROJ_SPNR.29GN14] [Riskware.Win32.Downware.devnmx] [NS:PUF.SilenceInstaller!1.9DDF] [Adware.Downware.6255] [BehavesLike.Win32.Dropper.dc] [Adware.Win32.VOPackage.40] [Win32/VOPackage.J] [Riskware/VOPackage] [Vopackage.D] [Trj/CI.A] [Win32/Trojan.Dropper.c9f]
1db15e687b8e17e8570a3c70538ee101	[W32.Sality.PE] [Win32.Sality.OG] [Heur.Win32.Obfuscated.1!O] [W32.Sality.R] [W32/Sality.AK] [W32.Sality.AE] [Sality.BBYL] [Win32/Sality.AA] [PE_SALITY.EM] [Win32:Kukacka] [Virus.Win32.Sality.gcen] [Virus.Win32.TuTu.A.200000] [Win32.Sector.11] [Virus.Sality.Win32.15] [BehavesLike.Win32.Sality.jc] [W32/Sality-AM] [W32/Sality.Y] [Win32.Sality.ab.173464] [Virus:Win32/Sality.AM] [Win32.Sality.LA[h]] [Win32/Kashu.B] [Virus.Win32.Sality.kaka] [Win32/Sality.NAT] [PE:Win32.KUKU.a!1389448] [Virus.Win32.Sality] [W32/Sality.AA] [Win32/Sality] [Win32/Virus.4fd]
4c320979ec64581d611d6182b61a78ba	[WS.Reputation.1] [BehavesLike.Win32.Downloader.dc] [Artemis!4C320979EC64] [Win32/VOPackage.AY] [NS:PUF.SilenceInstaller!1.9DDF] [PUA.Win32.VOPackage.bAY]
b2da20343a86235860dd58e6d02c8348	[Artemis!B2DA20343A86] [WS.Reputation.1] [Adware.Downware.3560] [BehavesLike.Win32.BadFile.tc] [AnyProtect] [NSIS.Application.AntProtect.A] [Win32/AnyProtect.E]
f670a12a60a13848524278daefa0fad2	[NS:PUF.SilenceInstaller!1.9DDF]

Whois

Property	Value
NameServer	NS11.DNSMADEEASY.COM
Created	2013-09-29 00:00:00
Changed	2014-09-29 00:00:00
Expires	2016-09-29 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-11-10	173.244.205.116 (ClassC)
2013-11-14	174.127.80.224 (ClassC)
2013-12-05	67.213.220.156 (ClassC)
2013-12-06	69.4.239.172 (ClassC)
2014-04-30	192.241.239.202 (ClassC)
2014-05-24	162.243.198.187 (ClassC)
2014-06-07	146.185.132.189 (ClassC)
2014-06-25	188.226.176.95 (ClassC)
2014-09-11	54.243.155.145 (ClassC)
2014-09-11	107.22.242.245 (ClassC)
2014-09-29	54.243.111.105 (ClassC)
2014-10-13	46.137.110.183 (ClassC)
2014-10-13	54.247.187.67 (ClassC)
2014-10-27	23.21.114.184 (ClassC)
2014-11-18	107.21.92.72 (ClassC)
2014-11-18	107.21.92.72 (ClassC)
2015-04-20	54.235.79.72 (ClassC)
2015-05-16	-
2015-05-22	174.129.201.100 (ClassC)
2015-06-09	23.21.192.168 (ClassC)
2015-10-02	108.59.9.193 (ClassC)
2016-01-27	52.72.165.251 (ClassC)
2016-10-05	184.168.221.63 (ClassC)
2016-12-23	185.117.75.26 (ClassC)
2017-05-05	185.106.120.209 (ClassC)
2018-12-23	185.117.74.51 (ClassC)
2019-01-27	209.99.40.223 (ClassC)
2019-01-28	209.99.40.222 (ClassC)
2019-03-25	195.22.26.248 (ClassC)
2019-04-29	64.95.103.186 (ClassC)
2019-05-08	64.95.103.185 (ClassC)
2019-05-20	64.95.103.180 (ClassC)
2019-05-27	64.95.103.184 (ClassC)
2019-05-29	64.95.103.181 (ClassC)
2019-06-02	64.95.103.187 (ClassC)
2019-06-03	64.95.103.183 (ClassC)
2019-06-05	64.95.103.188 (ClassC)
2019-06-10	64.95.103.182 (ClassC)
2019-07-31	63.251.106.21 (ClassC)
2019-08-14	162.217.98.139 (ClassC)
2019-08-28	162.217.98.140 (ClassC)
2019-09-02	162.217.98.144 (ClassC)
2019-09-15	162.217.98.134 (ClassC)
2019-09-27	162.217.98.137 (ClassC)
2019-12-03	162.217.98.145 (ClassC)
2019-12-31	162.217.98.154 (ClassC)
2020-01-10	199.21.76.91 (ClassC)
2020-01-23	63.251.106.22 (ClassC)
2020-02-04	162.217.99.133 (ClassC)
2020-02-06	162.217.99.136 (ClassC)
2020-03-02	162.217.98.158 (ClassC)
2020-03-05	162.217.99.138 (ClassC)
2020-03-09	199.21.76.82 (ClassC)
2020-03-20	162.217.99.137 (ClassC)
2020-12-20	162.217.99.134 (ClassC)
2024-02-19	34.174.61.199 (ClassC)
2025-01-26	44.221.84.105 (ClassC)
2025-03-08	44.200.87.10 (ClassC)
2025-04-21	3.229.117.57 (ClassC)

Subdomains

Date	Domain	IP
ns2.biphysics.com	2025-04-11	23.21.178.27
ns4.biphysics.com	2025-04-14	52.20.19.77
data.biphysics.com	2014-05-24	162.243.198.187
scripts.biphysics.com	2025-02-10	44.221.84.105

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]